General

  • Target

    CP v1.0.exe

  • Size

    6.6MB

  • Sample

    250126-z5qm7atqbs

  • MD5

    9a0ece806fc4b67f7f8c8fdebec3c8aa

  • SHA1

    fbb74f3acf9481c8fd3680729a9e0144b454f630

  • SHA256

    7cc1ec25b264f401e057891fd918e73973b60b26bee55bde61dba3e95ddaa766

  • SHA512

    a605bcc199d29996775b08a00fe232fe6c1ea63e5d4c45bdee71b0d407dc203db7874d818b88f5fc5af1b58f712fb97ea411dde1094a9192d1f651aed8dd4fd4

  • SSDEEP

    196608:bJerrDOYjJlpZstQoS9Hf12VKXMSE5b+CUV6vv:orrBpGt7G/Myyb+Ov

Malware Config

Targets

    • Target

      CP v1.0.exe

    • Size

      6.6MB

    • MD5

      9a0ece806fc4b67f7f8c8fdebec3c8aa

    • SHA1

      fbb74f3acf9481c8fd3680729a9e0144b454f630

    • SHA256

      7cc1ec25b264f401e057891fd918e73973b60b26bee55bde61dba3e95ddaa766

    • SHA512

      a605bcc199d29996775b08a00fe232fe6c1ea63e5d4c45bdee71b0d407dc203db7874d818b88f5fc5af1b58f712fb97ea411dde1094a9192d1f651aed8dd4fd4

    • SSDEEP

      196608:bJerrDOYjJlpZstQoS9Hf12VKXMSE5b+CUV6vv:orrBpGt7G/Myyb+Ov

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks